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TN THE CLAIMS 



Claim 1 (currently amended) A digital signature cryptographic method , performed by a 
computing device, the method comprising: 

supplying a set SI of k polynomial functions as a public-key, the set SI 
including the functions Pi(xi,...,Xn+v, yi,-.-,yk),---, Pk(xi,...,Xn+v, yi,-.-,yk), where k, v, 
and n are integers, x,,...,x„.v are n+v variables of a first type, y,,...,yk are k variables of 
a second type, and the set SI is obtained by applying a secret key operation on a set S2 
of k polynomial functions P'i(a,,...,an+v,yi,---,yk),---,P'k(ai,...,an+v,yi,.-.,yk) where 
ai,...,an+v are n+v variables which include a set of n "oil" variables a,,...,an, and a set of v 
"vinegar" variables a„+,,...,a„+v, the supplying comprising selecting the number v of 
"vinegar" variables to be greater than the number n of "oil" variables; 

providing a message to be signed; 

applying a hash function on the message to produce a series of k values 

bi,...,bk; 

substituting the series of k values bi,...,bk for the variables yi,...,yk of 
the set S2 respectively to produce a set S3 of k polynomial functionsp"kai,...,an+v), .., 
P"k(ai,...,an+v); 

selecting v values a'n+b-,a'„+v for the v "vinegar" variables a„+i,...,a„+v; 
solving a set of equations P"i(ai,...,an,a'n+i,— >a'n+v)=0,..., 
P"k(ai,...,an,a'n+i,...,a'„+v)=0 to obtain a solution for a'i,...,a'„; aad 

applying the secret key operation to transform a'i,...,a'n+v to a digital 

signature ei.—.en+ v; and 

assigning e ^ e„-^ v as the digital s ipnature of the message. 

Claim 2 (previously presented) A method according to claim I and also comprising 
verifying the digital signature. 

Claim 3 (previously presented) A method according to claim 2 and wherein said 

verifying comprises: 

obtaining the signature ei,...,en+v, the message, the hash function and the 

public key; 
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applying the hash function on the message to produce the series of k 

values bi,...,bk; and 

verifying that the equations Pi(ei,...,en+v,bi,...,b|c)=0,..., Pk(ei,...,en+v, 

bi,...,bk)=0 are satisfied. 

Claim 4 (previously presented) A method according to claim I and wherein the method 
comprises an HFEV scheme and the set S2 comprises a set f(a) of k polynomial 
functions of the HFEV scheme. 

Claim 5 (previously presented) A method according to claim 1 and wherein the method 
comprises a UOV scheme and the set S2 comprises a set S of k polynomial functions of 
the UOV scheme. 



Claim 6 (canceled) 

Claim 7 (previously presented) A method according to claim 1 and wherein v is 
selected such that is greater than where q is the number of elements of a finite 
field K over which the sets S 1, S2 and S3 are provided. 

Claim 8 (previously presented) A method according to claim 1 and wherein said 
supplying comprises obtaining the set SI from a subset S2' of k polynomial functions of 
the set S2, the subset S2' being characterized in that all coefficients of components 
involving ' any of the yu-.y^ variables in the k polynomial functions 
P'.(a,....,a„^,y„...,y.),...,P'k(a.,...,W„...,yk) are zero, and the number v of "vinegar- 
variables is greater than the number n of "oil" variables. 

Claim 9 (previously presented) A method according to claim 8 and wherein the set S2 
comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy one of the following conditions: 

(a) for each characteristic p other than 2 of a field K in an "Oil and 
Vinegar" scheme of degree 2, v satisfies the inequality q^"'"^' * n^ > 2 , 
where K is a finite field over which the sets SI, S2 and S3 are provided. 
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(b) for p = 2 in an "Oil and Vinegar" scheme of degree 3, v is greater 
than n*(l + sqrt(3)) and less than or equal to n^/6, and 

(c) for each p other than 2 in an "Oil and Vinegar" scheme of degree 3, v 
is greater than n and less than or equal to n"^. 

Claim 10 (previously presented) A method according to claim 8 and wherein the set S2 
comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy the inequalities v<n^ and q^^""^'' * n" >2^° for a 
characteristic p=2 of a field K in an "Oil and Vinegar" scheme of degree 2, where K is a 
finite field over which the sets SI, S2 and S3 are provided and q is the number of 
elements of K. 

Claim 11 (original) A method according to claim 1 and wherein said secret key 
operation comprises a secret affine transformation s on the n+v variables ai,...,an+v. 

Claim 12 (original) A method according to claim 4 and wherein said set S2 comprises 
an expression including k functions that are derived from a univariate polynomial. 

Claim 13 (original) A method according to claim 12 and wherein said univariate 
polynomial includes a univariate polynomial of degree less than or equal to 100,000. 

Claim 14 (original) A cryptographic method for verifying the digital signature of 
claim 1, the method comprising: 

obtaining the signature ei,...,e„+v, the message, the hash function and the 

public key; 

applying the hash fiinction on the message to produce the series of k 

values bi,...,bk; and 

verifying that the equations Pi(ei,...,en+v,bi,...,bic)=0,..., Pk(ei,...,en+v, 

bi,...,bk)=0 are satisfied. 



Claims 15-17 (canceled) 
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Claim 18 (currently amended) A com puter system for generating a signature, gefterater 
comprising: 

a signature input receiver operative to receive a set SI of k polynomial 
functions as a public-key and a message to be signed, the set SI including the functions 
P,(x.,...,x„.. y>,...,y.),..., Pk(x>,...,x„.. yu...,y.), where k, V, and n are integers, 
x,,...,xn.v are n+v variables of a first type, y,,...,yk are k variables of a second type, and 
thl set SI is obtained by applying a secret key operation on a set S2 of k polynomial 

functions P',(a„...,a„.v,y.,...,yk),-=P'k(ai,...,a„.v,yi V^l where a,,...,a„.v are n+v 

variables which include a set of n "oil" variables a,,...,an, and a set of v "vinegar- 
variables a„.,,...,an.v and the number v of "vinegar" variables is greater than the number 

n of "oil" variables; and 

a signature processor operatively associated with the signature input 

receiver and operative to perform the following operations: 

to apply a hash function on the message to produce a series of k 

values bi,...,bk, 

to substitute the series of k values bi,...,bk for the variables 
y,,...,yk of the set S2 respectively to produce a set S3 of k polynomial functions 

P"i(ai,...,an+v),.-.,P"k(aiv,an+v), 

to select V values a'n.,,...,a'n.v for the v "vinegar" variables 

to solve a set of equations P"i(ai,...,an,a'n+i,-"5a'n+v)'=0>--'5 
P"k(ai,...,an,a'n^i,...,a'n4-v)==0 to obtain a solution for a'i,...,a'n; aad 

to apply the secret key operation to transform a'i,...,a'n+v into a 

digital signature ei,...,en+viand 

tnji72ini^l_^ ^^n^^' signature of the message. 

Claim 19 (previously presented) Apparatus according to claim 18 and also 
comprising a signature verifier operatively associated with the signature processor and 
operative to verify the digital signature. 
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Claim 20 (previously presented) Apparatus according to claim 1 9 and wherein said 
signature verifier is operative to verify the digital signature by performing the following 

operations: 

obtaining the signature e,,...,en.v, the message, the hash function and the 

public key; 

applying the hash function on the message to produce the series of k 

values bi,...,bic; and 

verifying that the equations Pi(ei,...,en+v,bi,...,bk)=0,..., Pk(ei,.-,en+v, 

bi,...,bk)=0 are satisfied. 

Claim 21 (previously presented) Apparatus according to claim 18 and wherein the 
signature processor is operative to perform an HFEV scheme, and the set S2 comprises 
a set f(a) of k polynomial functions of the HFEV scheme. 

Claim 22 (previously presented) Apparatus according to claim 18 and wherein the 
signature processor is operative to perform a UOV scheme, and the set S2 comprises a 
set S of k polynomial functions of the UOV scheme. 

Claim 23 (canceled) 

Claim 24 (previously presented) Apparatus according to claim 18 and wherein v is 
selected such that is greater than 2'\ where q is the number of elements of a finite 
field K over which the sets SI, S2 and S3 are provided. 

Claim 25 (previously presented) Apparatus according to claim 18 and wherein the 
set SI is obtained from a subset S2' of k polynomial functions of the set S2, the subset 
S2' being characterized in that all coefficients of components involving any of the 
yi,...,yk variables in the k polynomial functions P'i(ai,...,a„4.v,yi,...,yk), 
...'p\(a.,...,a„^,yi,-.y.c) are zero, and the number v of "vinegar" variables is greater 
than the number n of "oil" variables. 
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Claim 26 (previously presented) Apparatus according to claim 25 and wherein the 
set S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v 
of "vinegar" variables is selected to satisfy one of the following conditions: 

(a) for each characteristic p other than 2 of a field K in an "Oil and 
Vinegar" scheme of degree 2, v satisfies the mequality q n >z , 
where K is a finite field over which the sets SI, S2 and S3 are provided, 

(b) for p = 2 in an "Oil and Vinegar" scheme of degree 3, v is greater 
than n*(l + sqrt(3)) and less than or equal to n^/6, and 

(c) for each p other than 2 in an "Oil and Vinegar" scheme of degree 3, v 
is greater than n and less than or equal to n*. 

Claim 27 (previously presented) Apparatus according to claim 25 and wherein the set 
S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy the inequalities v<n^ and q^^"")"' * n"* >2^° for a 
characteristic p=2 of a field K in an "Oil and Vinegar" scheme of degree 2, where K is a 
finite field over which the sets SI, S2 and S3 are provided and q is the number of 
elements of K. 

Claim 28 (previously presented) Apparatus according to claim 18 and wherein said 
secret key operation comprises a secret affme transformation s on the n+v variables 

ai5...,an+v 

Claim 29 (previously presented) Apparatus according to claim 21 and wherein said set 
S2 comprises an expression including k functions that are derived from a univariate 
polynomial. 

Claim 30 (previously presented) Apparatus according to claim 29 and wherein said 
univariate polynomial includes a univariate polynomial of degree less than or equal to 
100,000. 
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Claim 31 (previously presented) A signature verifier for verifying the digital signature 
generated by the signature generator of claim 18, the signature verifier comprising a 
verifier processor operative to perform the following operations: 

to obtain the signature e,,...,en+v, the message, the hash function and the 
public key via the signature input receiver; 

to apply the hash function on the message to produce the series of k 

values bi,...,bic; and 

to verify that the equations Pi(ei,...,en+v,bi,...,bk)=0,---5 Pk(ei,.-.,en+v, 

bi,.. .,bic)=0 are satisfied. 
Claims 32 - 34 (canceled) 

Claim 35 (currently amended) A digital signature generated by a computer system, the 
di gital signature comprising: 

a signature e,,...,en+v generated by processing a set SI of k polynomial 
functions provided as a public-key and a message to be signed, where the set SI 
includes functions P,(xi,...,x„.v, yi,..-,yic),.-, Pk(x,,...,x„+v, yi,..-,yk). where k, v, and n 
are integers, x,,...,x„+v are n+v variables of a first type, y,,...,yk are k variables of a 
second type, and the set SI is obtained by applying a secret key operation on a set S2 of 
k polynomial functions P',(a,,...,a„+v,yi,...,yk),.-.P'k(ai,...,an+v,yi,.--,yk) where a,,...,a„+v 
are n+v variables which include a set of n "oil" variables ai,...,an, and a set of v 
"vinegar" variables an-n,...,a„^-v, and the number v of "vinegar" variables is greater than 
the number n of "oil" variables, so that a hash function applied on the message to 
produce a series of k values b,,...,bk that are substituted for the variables yi,...,yk of the 
set S2 respectively to produce a set S3 of k polynomial functions P"i(ai,...,an-H.),..., 
P"k(ai,...,an.v) and v values a'n+,,...,a'„+v that are selected for the v "vinegar" variables 
an+iviii+r) enable to solve a set of equations P"i(ai,...,an,a'„+i,...,a'„+v)=0,..., 
P"k(ai?bjma'n+i,...,a'„+v)=0 to obtain a solution for a',,...,a'„, and application of the 
secret key operation transforms a'i,...,a'„+v into the digital signature ei,...,e„+v which is 
assigned as the digital signature of the message. 



Claim 36 (previously presented) A digital signature produced by the method of claim 



Claim 37 (previously presented) A method according to claim 1 and wherein said 
supplying comprises obtaining the set SI from a subset S2' of k polynomial functions of 
the set S2, the subset S2' being characterized in that all coefficients of components 
involving orders higher than 1 of any of the n "oil" variables ai,...,a„ and coefficients of 
components involving multiplication of two or more of the n "oil" variables a,,...,a„ in 
the k polynomial functions P'i(ai,...,an+v,yi,---,yk), ...,P'k(ai,...,an+v,yi,-.-,yk) are zero, 
and the number v of "vinegar" variables is greater than the number n of "oil" variables. 

Claim 38 (previously presented) A method according to claim 37 and wherein the set 
S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy one of the following conditions: 

(a) for each characteristic p other than 2 of a field K in an "Oil and 
Vinegar" scheme of degree 2, v satisfies the mequality q n > Z , 
where K is a finite field over which the sets SI, S2 and S3 are provided, 

(b) for p = 2 in an "Oil and Vinegar" scheme of degree 3, v is greater 
than n*(l + sqrt(3)) and less than or equal to nV6, and 

(c) for each p other than 2 in an "Oil and Vinegar" scheme of degree 3, v 
is greater than n and less than or equal to n . 

Claim 39 (previously presented) A method according to claim 37 and wherein the set 
S2 comprises a set S of k polynomial fijnctions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy the inequalities v<n^ and q(^-">-'* n'^ >2 for a 
characteristic p=2 of a field K in an "Oil and Vinegar" scheme of degree 2, where K is a 
finite field over which the sets SI, S2 and S3 are provided and q is the number of 
elements of K. 

Claim 40 (previously presented) Apparatus according to claim 18 and wherein the set 
SI is obtained from a subset S2' of k polynomial fiinctions of the set S2, the subset S2' 
being characterized in that all coefficients of components involving orders higher than 1 
of any of the n "oil" variables ai,...,a„ and coefficients of components involving 
multiplication of two or more of the n "oil" variables a,,...,a„ in the k polynomial 
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fiinctions P',(a,,...,an.v,yi,.-,yk), ...,P\(a,,...,a„.v,y.,...,yk) are zero, and the number v of 
"vinegar" variables is greater than the number n of "oil" variables. 

Claim 41 (previously presented) Apparatus according to claim 40 and wherein the set 
S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy one of the following conditions: 

(a) for each characteristic p other than 2 of a field K in an "Oil and 
Vinegar" scheme of degree 2, v satisfies the inequality q^^""'"'* n" > 2'*°, 
where K is a finite field over which the sets SI, S2 and S3 are provided, 

(b) for p = 2 in an "Oil and Vinegar" scheme of degree 3, v is greater 
than n*(l + sqrt(3)) and less than or equal to n^/6, and 

(c) for each p other than 2 in an "Oil and Vinegar" scheme of degree 3, v 
is greater than n and less than or equal to n'*. 

Claim 42 (previously presented) Apparatus according to claim 40 and wherein the set 
S2 comprises a set S of k polynomial functions of a UOV scheme, and the number v of 
"vinegar" variables is selected to satisfy the inequalities v<n^ and q(^-">'* n'* >2*° for a 
characteristic p=2 of a field K in an "Oil and Vinegar" scheme of degree 2, where K is a 
finite field over which the sets SI, S2 and S3 are provided and q is the number of 
elements of K. 

Claim 43 (new) A method according to claim 1 and wherein the computing device 
comprises at least one of the following: a computer; and a smart card. 

Claim 44 (new) Apparatus according to claim 18 and wherein the computer system 
comprises at least one of the following: a computer; and a smart card. 
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